Skip to main content
GET
/
v1
/
risk
/
velocity
List velocity anomalies
curl --request GET \
  --url https://api.truthlocks.com/v1/risk/velocity \
  --header 'X-API-Key: <api-key>'
{
  "items": [
    {
      "subject_id": "<string>",
      "action": "<string>",
      "count": 123,
      "threshold": 123,
      "severity": "<string>"
    }
  ]
}
Returns a paginated list of subjects whose velocity score meets or exceeds the specified threshold. Use this endpoint to monitor for velocity anomalies across your tenant without querying individual subjects. Results are sorted by velocity score (highest first) and support cursor-based pagination. See the velocity and anomaly scoring guide for the scoring model and integration patterns.

​
Request

​
min_score
integer
Minimum velocity score threshold (0–100). Only subjects with a score at or above this value are returned. Defaults to 0.
​
limit
integer
Maximum number of results to return (1–100). Defaults to 25.
​
cursor
string
Pagination cursor from a previous response. Pass this to retrieve the next page of results.

​
Response

​
anomalies
array
List of subjects with elevated velocity scores. Each entry includes subject_id, action_type, windows (with 1m, 5m, 1h, 24h counts), velocity_score, and last_recorded_at.
​
cursor
string
Pagination cursor for the next page. null when there are no more results.

Authorizations

​
X-API-Key
string
header
required

API key for machine-to-machine authentication

Query Parameters

​
limit
integer
default:20
​
severity
string

Response

Velocity anomalies

​
items
object[]